function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
pandi GSpandi GS 

Creation of user for powerbuilderBI and Tableau integrations

Hi,
We are in need to send our data to external systems(tableau & powerBuilderBI) via connectors. We can achieve it via below process
1. create System admin users for Tableu & BuilderBI team
Downfall: it will give access to all objects and full access & license cost
2. Create 2 standard user with MFA and required object access
Downfall: license cost
3. Create 2 API Only user & required object access
Downfall: license cost
4. Create 1 API Only user & required object access & share the login credentials to both teams
Downfall: If any one team locks the account, then it will impact both and both team can see 2 teams objects.

Which is best to proceed with? Is there any other approaches?
SubratSubrat (Salesforce Developers) 
Hello Pandi ,

requesting you to refer this comprehensive guide for the Tableau Integration -> https://hevodata.com/learn/connect-salesforce-to-tableau/

Hope it helps !
Thank you.
pandi GSpandi GS
Hi, we know how to do connections with external, we like to know which is good implementations to proceed with.! Thanks
Shri RajShri Raj
The best approach depends on your organization's specific needs and requirements. Here's a brief overview of each option to help you make a decision:
System admin users: This option will give the Tableau and PowerBuilderBI teams full access to all objects in Salesforce. However, it comes with the cost of additional licenses and is not ideal if you only want to grant these teams access to specific objects.
Standard users with MFA: This option will allow you to grant the Tableau and PowerBuilderBI teams access to specific objects, but comes with the cost of additional licenses and MFA setup.
API-only users: This option allows you to grant the Tableau and PowerBuilderBI teams access to specific objects via the Salesforce API, but comes with the cost of additional licenses.
Shared API-only user: This option allows you to grant the Tableau and PowerBuilderBI teams access to specific objects via the Salesforce API, but if one team locks the account, it will impact both teams and both teams can see each other's objects. Additionally, sharing login credentials between teams may raise security and compliance concerns.
If cost is a concern, option 4 (Shared API-only user) may be the best choice as it only requires one license. However, if security and compliance are a concern, option 2 (Standard users with MFA) may be a better choice as it provides more control over access and better security features.
Another approach you could consider is using a middleware or integration platform to securely connect to Salesforce and provide access to data for Tableau and PowerBuilderBI. This can help you ensure the data is securely transmitted and eliminate the need to share login credentials.